348 CHAPTER 11: USING AAA AND RADIUS COMMANDS
authorized-force: Forced authorized mode, configuring the interface to always
stay in authorized state and the user is allowed to access the network resources
without authentication/authorization.
unauthorized-force: Forced unauthorized mode, configuring the interface to
always stay in non-authorized mode and the user is not allowed to access the
network resources.
interface
interface-list
: Ethernet interface list including several Ethernet
interfaces, expressed in the format
interface-list
= {
interface-num
[ to
interface-num
] } & < 1-10 >.
interface-num
specifies a single Ethernet
interface in the format
interface-num
= {
interface-type interface-num
|
interface-name
}, where
interface-type
specifies the interface type,
interface-num
specifies the interface number and interface-name specifies the
interface name. For the respective meanings and value ranges, see the parameters
of the Port Command chapter.
Description
Use the dot1x port-control command to configure the mode for 802.1x to
perform access control on the specified interface. Use the
undo dot1x port-control command to restore the default access control mode.
By default, the value is auto.
This command is used to set the mode, or the interface state, for 802.1x to
perform access control on the specified interface. This command has an effect on
the interface specified by the parameter
interface-list
when executed in
System View. It has an effect on all the interfaces when no interface is specified.
The parameter
interface-list
cannot be entered when the command is
executed in Ethernet Port View and it has an effect only on the current interface.
Related command: display dot1x.
Example
To configure the interface GigabitEthernet 1/0/1 to be in force-unauthorized state,
enter the following:
<SW5500>system-view
System View: return to User View with Ctrl-Z
[SW5500]dot1x port-control force-unauthorized interface
gigabitethernet 1/0/1
dot1x port-method Syntax
dot1x port-method { macbased | portbased } [ interface
interface-list ]
undo dot1x port-method [ interface
interface-list
]
View
Ethernet Port View
To Next Page
Loading...
